CISCO-IPSEC-FLOW-MONITOR-MIB

All MIBs › CISCO-IPSEC-FLOW-MONITOR-MIB

Organization: Tivoli Systems and Cisco Systems

Last Updated: 2007-10-24

Category: Cisco Devices, VPN and Security

Description: Monitors active IPSec tunnels, security associations, and encrypted traffic flow statistics on Cisco devices.

IPNetwork Monitor uses several OIDs from this MIB in network discovery and polling the applicable devices. Start monitoring CISCO-IPSEC-FLOW-MONITOR-MIB with a free 30-day trial of IPNetwork Monitor.

What Is CISCO-IPSEC-FLOW-MONITOR-MIB?

CISCO-IPSEC-FLOW-MONITOR-MIB is a Cisco MIB, designed to align with an IETF standard structure with Cisco-specific features excluded, for monitoring IPSec-based VPN structures on Cisco routers and security appliances. It exposes IKE (Internet Key Exchange) tunnel and phase statistics, including active and previous tunnel counts, inbound/outbound octet and packet counters, dropped packets, notify messages, and Phase 2 exchange success/invalid/reject counts. This is a performance and fault-monitoring MIB for VPN infrastructure: operators track cikeGlobalActiveTunnels to see how many IPSec tunnels are up, watch drop and invalid/reject counters to detect negotiation failures or attacks, and use octet/packet counters for VPN traffic accounting. It explicitly references IPSec/ISAKMP/IKE standards terminology and is intended to interoperate as an IETF-style MIB, though it ships as a Cisco enterprise module. It is typically deployed on Cisco VPN routers, firewalls, or concentrators terminating site-to-site or remote-access IPSec tunnels. This is a heavily searched Cisco MIB, since cisco-ipsec-flow-monitor-mib is the standard reference for monitoring IPsec tunnel/flow statistics on Cisco VPN gateways via SNMP.

IPNetwork Monitor allows you to monitor SNMP objects defined in CISCO-IPSEC-FLOW-MONITOR-MIB. Use the built-in SNMP Monitoring Browser to explore available variables, view their current values and descriptions, and select the objects you want to monitor. You can then create SNMP monitors, configure thresholds, and receive alerts when monitored values change.

Supported Devices

Cisco router/firewall/VPN concentrator terminating IPSec tunnels

Monitoring Examples

An operator would poll cikeGlobalActiveTunnels to track how many IKE/IPSec tunnels are currently established and compare against cikeGlobalPreviousTunnels to see churn. Rising cikeGlobalInDropPkts or cikeGlobalInP2ExchgInvalids / cikeGlobalInP2ExchgRejects indicates IKE negotiation problems or a misconfigured peer, while cikeGlobalInOctets and cikeGlobalInPkts give raw encrypted traffic volume for capacity planning. cikeGlobalInP2SaDelRequests spikes could reveal tunnels being torn down unexpectedly, useful when diagnosing VPN instability.

What Can Be Monitored

active/previous IKE tunnel counts
inbound/outbound encrypted octets and packets
dropped packets
Phase 2 exchange invalid/reject counts
SA deletion requests
IKE notify message counts

Imported Objects

From CISCO-MEDIA-GATEWAY-MIB

cmgwIndex

OBJECT-TYPE

From CISCO-SMI

ciscoMgmt

OBJECT-IDENTITY

From SNMPv2-CONF

MODULE-COMPLIANCE
NOTIFICATION-GROUP
OBJECT-GROUP

From SNMPv2-SMI

Counter32
Counter64
Gauge32
Integer32
MODULE-IDENTITY
NOTIFICATION-TYPE
OBJECT-TYPE
Unsigned32

From SNMPv2-TC

DisplayString
TEXTUAL-CONVENTION
TimeInterval
TimeStamp
TruthValue

How to Use in IPNetwork Monitor

Example using cikeGlobalPreviousTunnels OID:

Select a Cisco router/firewall/VPN concentrator terminating IPsec tunnel as the target host to create a monitor — the SNMP service should be up and running on it. Click New Monitor, then check SNMP Custom on the Favorites tab, click Next, and confirm the host. On the next page, click Select... to open the built-in SNMP MIB Browser and type cikeGlobalPreviousTunnels into the Find box to locate it in the OID tree, then select it and click OK. The total number of previously active IPsec Phase-1 IKE Tunnels. On the monitor's Main parameters page you can set the target's SNMP port (default 161), credentials, polling interval, and other settings — see the SNMP Monitor help for details. On the State conditions and Alerting tabs, configure when the monitor should change state and trigger an alert; since this is a Counter32-type OID, Value bounds is the most useful condition here — trigger an alert if the counter increases sharply between polls relative to its normal baseline (in SAs), since an unexpected spike often reflects a real change in traffic or activity. Click Finish to create the monitor; you can adjust any parameter later.

OIDs

OID symbolic	OID numeric	Type	Access	Description
NTF cikeCertCrlFailure	1.3.6.1.4.1.9.9.171.2.0.4			This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences a Certificate or a Certificate Revoke List (CRL) related error.
cikeFailEntry	1.3.6.1.4.1.9.9.171.1.5.2.1.1		not-accessible	Each entry contains the attributes associated with an IPsec Phase-1 failure.
I32 cikeFailIndex	1.3.6.1.4.1.9.9.171.1.5.2.1.1.1	Integer32	not-accessible	The IPsec Phase-1 Failure Table index. The value of the index is a number which begins at one and is incremented with each IPsec Phase-1 failure. The value of this object will wrap at 2,147,483,647.
ADR cikeFailLocalAddr	1.3.6.1.4.1.9.9.171.1.5.2.1.1.8	IPSIpAddress	read-only	The IP address of the local peer.
IKE cikeFailLocalType	1.3.6.1.4.1.9.9.171.1.5.2.1.1.4	IkePeerType	read-only	The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.
STR cikeFailLocalValue	1.3.6.1.4.1.9.9.171.1.5.2.1.1.5	DisplayString	read-only	The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
INT cikeFailReason	1.3.6.1.4.1.9.9.171.1.5.2.1.1.2	INTEGER	read-only	The reason for the failure. Possible reasons include: 1 = other 2 = peer delete request was received 3 = contact with peer was lost 4 = local failure occurred 5 = authentication failure 6 = hash validation failure 7 = encryption failure 8 = internal error occurred 9 = system capacity failure 10 = proposal failure 11 = peer's certificate is unavailable 12 = peer's certificate was found invalid 13 = local certificate expired 14 = certificate revoke list (crl) failure 15 = peer encoding error 16 = non-existent security association 17 = operator requested termination.
ADR cikeFailRemoteAddr	1.3.6.1.4.1.9.9.171.1.5.2.1.1.9	IPSIpAddress	read-only	The IP address of the remote peer.
IKE cikeFailRemoteType	1.3.6.1.4.1.9.9.171.1.5.2.1.1.6	IkePeerType	read-only	The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
STR cikeFailRemoteValue	1.3.6.1.4.1.9.9.171.1.5.2.1.1.7	DisplayString	read-only	The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
cikeFailTable	1.3.6.1.4.1.9.9.171.1.5.2.1		not-accessible	The IPsec Phase-1 Failure Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the cipSecFailTableSize object.
TIM cikeFailTime	1.3.6.1.4.1.9.9.171.1.5.2.1.1.3	TimeStamp	read-only	The value of sysUpTime in hundredths of seconds at the time of the failure.
G32 cikeGlobalActiveTunnels	1.3.6.1.4.1.9.9.171.1.2.1.1	Gauge32	read-only	The number of currently active IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalAuthFails	1.3.6.1.4.1.9.9.171.1.2.1.23	Counter32	read-only	The total number of authentications which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalDecryptFails	1.3.6.1.4.1.9.9.171.1.2.1.24	Counter32	read-only	The total number of decryptions which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalHashValidFails	1.3.6.1.4.1.9.9.171.1.2.1.25	Counter32	read-only	The total number of hash validations which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalInDropPkts	1.3.6.1.4.1.9.9.171.1.2.1.5	Counter32	read-only	The total number of packets which were dropped during receive processing by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalInitTunnelFails	1.3.6.1.4.1.9.9.171.1.2.1.20	Counter32	read-only	The total number of IPsec Phase-1 IKE Tunnels which were locally initiated and failed to activate.
C32 cikeGlobalInitTunnels	1.3.6.1.4.1.9.9.171.1.2.1.19	Counter32	read-only	The total number of IPsec Phase-1 IKE Tunnels which were locally initiated.
C32 cikeGlobalInNotifys	1.3.6.1.4.1.9.9.171.1.2.1.6	Counter32	read-only	The total number of notifys received by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalInOctets	1.3.6.1.4.1.9.9.171.1.2.1.3	Counter32	read-only	The total number of octets received by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalInP2ExchgInvalids	1.3.6.1.4.1.9.9.171.1.2.1.8	Counter32	read-only	The total number of IPsec Phase-2 exchanges which were received and found to be invalid by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalInP2ExchgRejects	1.3.6.1.4.1.9.9.171.1.2.1.9	Counter32	read-only	The total number of IPsec Phase-2 exchanges which were received and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalInP2Exchgs	1.3.6.1.4.1.9.9.171.1.2.1.7	Counter32	read-only	The total number of IPsec Phase-2 exchanges received by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalInP2SaDelRequests	1.3.6.1.4.1.9.9.171.1.2.1.10	Counter32	read-only	The total number of IPsec Phase-2 security association delete requests received by all currently and previously active and IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalInPkts	1.3.6.1.4.1.9.9.171.1.2.1.4	Counter32	read-only	The total number of packets received by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalNoSaFails	1.3.6.1.4.1.9.9.171.1.2.1.26	Counter32	read-only	The total number of non-existent Security Association in failures which occurred during processing of all current and previous IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalOutDropPkts	1.3.6.1.4.1.9.9.171.1.2.1.13	Counter32	read-only	The total number of packets which were dropped during send processing by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalOutNotifys	1.3.6.1.4.1.9.9.171.1.2.1.14	Counter32	read-only	The total number of notifys sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalOutOctets	1.3.6.1.4.1.9.9.171.1.2.1.11	Counter32	read-only	The total number of octets sent by all currently and previously active and IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalOutP2ExchgInvalids	1.3.6.1.4.1.9.9.171.1.2.1.16	Counter32	read-only	The total number of IPsec Phase-2 exchanges which were sent and found to be invalid by all currently and previously active IPsec Phase-1 Tunnels.
C32 cikeGlobalOutP2ExchgRejects	1.3.6.1.4.1.9.9.171.1.2.1.17	Counter32	read-only	The total number of IPsec Phase-2 exchanges which were sent and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalOutP2Exchgs	1.3.6.1.4.1.9.9.171.1.2.1.15	Counter32	read-only	The total number of IPsec Phase-2 exchanges which were sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalOutP2SaDelRequests	1.3.6.1.4.1.9.9.171.1.2.1.18	Counter32	read-only	The total number of IPsec Phase-2 SA delete requests sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalOutPkts	1.3.6.1.4.1.9.9.171.1.2.1.12	Counter32	read-only	The total number of packets sent by all currently and previously active and IPsec Phase-1 Tunnels.
C32 cikeGlobalPreviousTunnelsEx	1.3.6.1.4.1.9.9.171.1.2.1.2	Counter32	read-only	The total number of previously active IPsec Phase-1 IKE Tunnels.
C32 cikeGlobalRespTunnelFails	1.3.6.1.4.1.9.9.171.1.2.1.21	Counter32	read-only	The total number of IPsec Phase-1 IKE Tunnels which were remotely initiated and failed to activate.
cikeGlobalStats	1.3.6.1.4.1.9.9.171.1.2.1
C32 cikeGlobalSysCapFails	1.3.6.1.4.1.9.9.171.1.2.1.22	Counter32	read-only	The total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-1 IKE Tunnels.
NTF cikeNoSa	1.3.6.1.4.1.9.9.171.2.0.6			This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences a non-existent security association error.
NUM cikePeerActiveTime	1.3.6.1.4.1.9.9.171.1.2.2.1.8	TimeInterval	read-only	The length of time that the peer association has existed in hundredths of a second.
I32 cikePeerActiveTunnelIndex	1.3.6.1.4.1.9.9.171.1.2.2.1.9	Integer32	read-only	The index of the active IPsec Phase-1 IKE Tunnel (cikeTunIndex in the cikeTunnelTable) for this peer association. If an IPsec Phase-1 IKE Tunnel is not currently active, then the value of this object will be zero.
cikePeerCorrEntry	1.3.6.1.4.1.9.9.171.1.2.4.1		not-accessible	Each entry contains the attributes of an IPsec Phase-1 IKE Peer Association to IPsec Phase-2 Tunnel Correlation.
I32 cikePeerCorrIntIndex	1.3.6.1.4.1.9.9.171.1.2.4.1.5	Integer32	not-accessible	The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.
I32 cikePeerCorrIpSecTunIndex	1.3.6.1.4.1.9.9.171.1.2.4.1.7	Integer32	read-only	The index of the active IPsec Phase-2 Tunnel (cipSecTunIndex in the cipSecTunnelTable) for this IPsec Phase-1 IKE Peer Association.
IKE cikePeerCorrLocalType	1.3.6.1.4.1.9.9.171.1.2.4.1.1	IkePeerType	not-accessible	The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.
STR cikePeerCorrLocalValue	1.3.6.1.4.1.9.9.171.1.2.4.1.2	DisplayString	not-accessible	The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
IKE cikePeerCorrRemoteType	1.3.6.1.4.1.9.9.171.1.2.4.1.3	IkePeerType	not-accessible	The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
STR cikePeerCorrRemoteValue	1.3.6.1.4.1.9.9.171.1.2.4.1.4	DisplayString	not-accessible	The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
I32 cikePeerCorrSeqNum	1.3.6.1.4.1.9.9.171.1.2.4.1.6	Integer32	not-accessible	The sequence number of the local-remote peer association. This sequence number is used to uniquely identify multiple instances of an unique association between the local and remote peer.
cikePeerCorrTable	1.3.6.1.4.1.9.9.171.1.2.4		not-accessible	The IPsec Phase-1 Internet Key Exchange Peer Association to IPsec Phase-2 Tunnel Correlation Table. There is one entry in this table for each active IPsec Phase-2 Tunnel.
cikePeerEntry	1.3.6.1.4.1.9.9.171.1.2.2.1		not-accessible	Each entry contains the attributes associated with an IPsec Phase-1 IKE peer association.
I32 cikePeerIntIndex	1.3.6.1.4.1.9.9.171.1.2.2.1.5	Integer32	not-accessible	The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.
ADR cikePeerLocalAddr	1.3.6.1.4.1.9.9.171.1.2.2.1.6	IPSIpAddress	read-only	The IP address of the local peer.
IKE cikePeerLocalType	1.3.6.1.4.1.9.9.171.1.2.2.1.1	IkePeerType	not-accessible	The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.
STR cikePeerLocalValue	1.3.6.1.4.1.9.9.171.1.2.2.1.2	DisplayString	not-accessible	The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
ADR cikePeerRemoteAddr	1.3.6.1.4.1.9.9.171.1.2.2.1.7	IPSIpAddress	read-only	The IP address of the remote peer.
IKE cikePeerRemoteType	1.3.6.1.4.1.9.9.171.1.2.2.1.3	IkePeerType	not-accessible	The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
STR cikePeerRemoteValue	1.3.6.1.4.1.9.9.171.1.2.2.1.4	DisplayString	not-accessible	The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
cikePeerTable	1.3.6.1.4.1.9.9.171.1.2.2		not-accessible	The IPsec Phase-1 Internet Key Exchange Peer Table. There is one entry in this table for each IPsec Phase-1 IKE peer association which is currently associated with an active IPsec Phase-1 Tunnel. The IPsec Phase-1 IKE Tunnel associated with this IPsec Phase-1 IKE peer association may or may not be currently active.
G32 cikePhase1GWActiveTunnels	1.3.6.1.4.1.9.9.171.1.2.5.1.1	Gauge32	read-only	The number of currently active IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWAuthFails	1.3.6.1.4.1.9.9.171.1.2.5.1.23	Counter32	read-only	The total number of authentications which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWDecryptFails	1.3.6.1.4.1.9.9.171.1.2.5.1.24	Counter32	read-only	The total number of decryptions which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWHashValidFails	1.3.6.1.4.1.9.9.171.1.2.5.1.25	Counter32	read-only	The total number of hash validations which ended in failure by all current and previous IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWInDropPkts	1.3.6.1.4.1.9.9.171.1.2.5.1.5	Counter32	read-only	The total number of packets which were dropped during receive processing by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWInitTunnelFails	1.3.6.1.4.1.9.9.171.1.2.5.1.20	Counter32	read-only	The total number of IPsec Phase-1 IKE Tunnels which were locally initiated and failed to activate.
C32 cikePhase1GWInitTunnels	1.3.6.1.4.1.9.9.171.1.2.5.1.19	Counter32	read-only	The total number of IPsec Phase-1 IKE Tunnels which were locally initiated.
C32 cikePhase1GWInNotifys	1.3.6.1.4.1.9.9.171.1.2.5.1.6	Counter32	read-only	The total number of notifys received by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWInOctets	1.3.6.1.4.1.9.9.171.1.2.5.1.3	Counter32	read-only	The total number of octets received by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWInP2ExchgInvalids	1.3.6.1.4.1.9.9.171.1.2.5.1.8	Counter32	read-only	The total number of IPsec Phase-2 exchanges which were received and found to be invalid by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWInP2ExchgRejects	1.3.6.1.4.1.9.9.171.1.2.5.1.9	Counter32	read-only	The total number of IPsec Phase-2 exchanges which were received and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWInP2Exchgs	1.3.6.1.4.1.9.9.171.1.2.5.1.7	Counter32	read-only	The total number of IPsec Phase-2 exchanges received by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWInP2SaDelRequests	1.3.6.1.4.1.9.9.171.1.2.5.1.10	Counter32	read-only	The total number of IPsec Phase-2 'Security Association' delete requests received by all currently and previously active and IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWInPkts	1.3.6.1.4.1.9.9.171.1.2.5.1.4	Counter32	read-only	The total number of packets received by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWNoSaFails	1.3.6.1.4.1.9.9.171.1.2.5.1.26	Counter32	read-only	The total number of non-existent 'Security Association' failures occurred during processing of current and previous IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWOutDropPkts	1.3.6.1.4.1.9.9.171.1.2.5.1.13	Counter32	read-only	The total number of packets which were dropped during send processing by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWOutNotifys	1.3.6.1.4.1.9.9.171.1.2.5.1.14	Counter32	read-only	The total number of notifys sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWOutOctets	1.3.6.1.4.1.9.9.171.1.2.5.1.11	Counter32	read-only	The total number of octets sent by all currently and previously active and IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWOutP2ExchgInvalids	1.3.6.1.4.1.9.9.171.1.2.5.1.16	Counter32	read-only	The total number of IPsec Phase-2 exchanges which were sent and found to be invalid by all currently and previously active IPsec Phase-1 Tunnels.
C32 cikePhase1GWOutP2ExchgRejects	1.3.6.1.4.1.9.9.171.1.2.5.1.17	Counter32	read-only	The total number of IPsec Phase-2 exchanges which were sent and rejected by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWOutP2Exchgs	1.3.6.1.4.1.9.9.171.1.2.5.1.15	Counter32	read-only	The total number of IPsec Phase-2 exchanges which were sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWOutP2SaDelRequests	1.3.6.1.4.1.9.9.171.1.2.5.1.18	Counter32	read-only	The total number of IPsec Phase-2 SA delete requests sent by all currently and previously active IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWOutPkts	1.3.6.1.4.1.9.9.171.1.2.5.1.12	Counter32	read-only	The total number of packets sent by all currently and previously active and IPsec Phase-1 Tunnels.
C32 cikePhase1GWPreviousTunnels	1.3.6.1.4.1.9.9.171.1.2.5.1.2	Counter32	read-only	The total number of previously active IPsec Phase-1 IKE Tunnels.
C32 cikePhase1GWRespTunnelFails	1.3.6.1.4.1.9.9.171.1.2.5.1.21	Counter32	read-only	The total number of IPsec Phase-1 IKE Tunnels which were remotely initiated and failed to activate.
cikePhase1GWStatsEntry	1.3.6.1.4.1.9.9.171.1.2.5.1		not-accessible	Each entry contains the attributes of an Phase-1 IKE stats information for the related gateway. There is only one entry for each gateway. The entry is created when a gateway up and cannot be deleted.
cikePhase1GWStatsTable	1.3.6.1.4.1.9.9.171.1.2.5		not-accessible	Phase-1 IKE stats information is included in this table. Each entry is related to a specific gateway which is identified by 'cmgwIndex'.
C32 cikePhase1GWSysCapFails	1.3.6.1.4.1.9.9.171.1.2.5.1.22	Counter32	read-only	The total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-1 IKE Tunnels.
NTF cikeProtocolFailure	1.3.6.1.4.1.9.9.171.2.0.5			This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences a protocol related error.
NTF cikeSysFailure	1.3.6.1.4.1.9.9.171.2.0.3			This notification is generated when the processing for an IPsec Phase-1 IKE Tunnel experiences an internal or system capacity error.
NUM cikeTunActiveTime	1.3.6.1.4.1.9.9.171.1.2.3.1.16	TimeInterval	read-only	The length of time the IPsec Phase-1 IKE tunnel has been active in hundredths of seconds.
IKE cikeTunAuthMethod	1.3.6.1.4.1.9.9.171.1.2.3.1.14	IkeAuthMethod	read-only	The authentication method used in IPsec Phase-1 IKE negotiations.
DIF cikeTunDiffHellmanGrp	1.3.6.1.4.1.9.9.171.1.2.3.1.11	DiffHellmanGrp	read-only	The Diffie Hellman Group used in IPsec Phase-1 IKE negotiations.
ENC cikeTunEncryptAlgo	1.3.6.1.4.1.9.9.171.1.2.3.1.12	EncryptAlgo	read-only	The encryption algorithm used in IPsec Phase-1 IKE negotiations.
IKE cikeTunHashAlgo	1.3.6.1.4.1.9.9.171.1.2.3.1.13	IkeHashAlgo	read-only	The hash algorithm used in IPsec Phase-1 IKE negotiations.
I32 cikeTunHistActiveIndex	1.3.6.1.4.1.9.9.171.1.4.2.1.1.3	Integer32	read-only	The index of the previously active IPsec Phase-1 IKE Tunnel.
NUM cikeTunHistActiveTime	1.3.6.1.4.1.9.9.171.1.4.2.1.1.20	TimeInterval	read-only	The length of time the IPsec Phase-1 IKE tunnel was been active in hundredths of seconds.
IKE cikeTunHistAuthMethod	1.3.6.1.4.1.9.9.171.1.4.2.1.1.17	IkeAuthMethod	read-only	The authentication method used in IPsec Phase-1 IKE negotiations.
DIF cikeTunHistDiffHellmanGrp	1.3.6.1.4.1.9.9.171.1.4.2.1.1.14	DiffHellmanGrp	read-only	The Diffie Hellman Group used in IPsec Phase-1 IKE negotiations.
ENC cikeTunHistEncryptAlgo	1.3.6.1.4.1.9.9.171.1.4.2.1.1.15	EncryptAlgo	read-only	The encryption algorithm used in IPsec Phase-1 IKE negotiations.
IKE cikeTunHistHashAlgo	1.3.6.1.4.1.9.9.171.1.4.2.1.1.16	IkeHashAlgo	read-only	The hash algorithm used in IPsec Phase-1 IKE negotiations.
I32 cikeTunHistIndex	1.3.6.1.4.1.9.9.171.1.4.2.1.1.1	Integer32	not-accessible	The index of the IPsec Phase-1 IKE Tunnel History Table. The value of the index is a number which begins at one and is incremented with each tunnel that ends. The value of this object will wrap at 2,147,483,647.
C32 cikeTunHistInDropPkts	1.3.6.1.4.1.9.9.171.1.4.2.1.1.25	Counter32	read-only	The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receive processing.
C32 cikeTunHistInNotifys	1.3.6.1.4.1.9.9.171.1.4.2.1.1.26	Counter32	read-only	The total number of notifys received by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunHistInOctets	1.3.6.1.4.1.9.9.171.1.4.2.1.1.23	Counter32	read-only	The total number of octets received by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunHistInP2ExchgInvalids	1.3.6.1.4.1.9.9.171.1.4.2.1.1.28	Counter32	read-only	The total number of IPsec Phase-2 exchanges received and found to be invalid by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunHistInP2ExchgRejects	1.3.6.1.4.1.9.9.171.1.4.2.1.1.29	Counter32	read-only	The total number of IPsec Phase-2 exchanges received and rejected by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunHistInP2Exchgs	1.3.6.1.4.1.9.9.171.1.4.2.1.1.27	Counter32	read-only	The total number of IPsec Phase-2 exchanges received by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunHistInP2SaDelRequests	1.3.6.1.4.1.9.9.171.1.4.2.1.1.30	Counter32	read-only	The total number of IPsec Phase-2 security association delete requests received by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunHistInPkts	1.3.6.1.4.1.9.9.171.1.4.2.1.1.24	Counter32	read-only	The total number of packets received by this IPsec Phase-1 IKE Tunnel.
I32 cikeTunHistLifeTime	1.3.6.1.4.1.9.9.171.1.4.2.1.1.18	Integer32	read-only	The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds.
ADR cikeTunHistLocalAddr	1.3.6.1.4.1.9.9.171.1.4.2.1.1.9	IPSIpAddress	read-only	The IP address of the local endpoint for the IPsec Phase-1 IKE Tunnel.
STR cikeTunHistLocalName	1.3.6.1.4.1.9.9.171.1.4.2.1.1.10	DisplayString	read-only	The DNS name of the local IP address for the IPsec Phase-1 IKE Tunnel. If the DNS name associated with the local tunnel endpoint is not known, then the value of this object will be a NULL string.
IKE cikeTunHistNegoMode	1.3.6.1.4.1.9.9.171.1.4.2.1.1.13	IkeNegoMode	read-only	The negotiation mode of the IPsec Phase-1 IKE Tunnel.
C32 cikeTunHistOutDropPkts	1.3.6.1.4.1.9.9.171.1.4.2.1.1.33	Counter32	read-only	The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during send processing.
C32 cikeTunHistOutNotifys	1.3.6.1.4.1.9.9.171.1.4.2.1.1.34	Counter32	read-only	The total number of notifys sent by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunHistOutOctets	1.3.6.1.4.1.9.9.171.1.4.2.1.1.31	Counter32	read-only	The total number of octets sent by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunHistOutP2ExchgInvalids	1.3.6.1.4.1.9.9.171.1.4.2.1.1.36	Counter32	read-only	The total number of IPsec Phase-2 exchanges sent and found to be invalid by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunHistOutP2ExchgRejects	1.3.6.1.4.1.9.9.171.1.4.2.1.1.37	Counter32	read-only	The total number of IPsec Phase-2 exchanges sent and rejected by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunHistOutP2Exchgs	1.3.6.1.4.1.9.9.171.1.4.2.1.1.35	Counter32	read-only	The total number of IPsec Phase-2 exchanges sent by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunHistOutP2SaDelRequests	1.3.6.1.4.1.9.9.171.1.4.2.1.1.38	Counter32	read-only	The total number of IPsec Phase-2 security association delete requests sent by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunHistOutPkts	1.3.6.1.4.1.9.9.171.1.4.2.1.1.32	Counter32	read-only	The total number of packets sent by this IPsec Phase-1 IKE Tunnel.
I32 cikeTunHistPeerIntIndex	1.3.6.1.4.1.9.9.171.1.4.2.1.1.6	Integer32	read-only	The internal index of the local-remote peer association. This internal index is used to uniquely identify multiple associations between the local and remote peer.
IKE cikeTunHistPeerLocalType	1.3.6.1.4.1.9.9.171.1.4.2.1.1.4	IkePeerType	read-only	The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.
STR cikeTunHistPeerLocalValue	1.3.6.1.4.1.9.9.171.1.4.2.1.1.5	DisplayString	read-only	The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
IKE cikeTunHistPeerRemoteType	1.3.6.1.4.1.9.9.171.1.4.2.1.1.7	IkePeerType	read-only	The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
STR cikeTunHistPeerRemoteValue	1.3.6.1.4.1.9.9.171.1.4.2.1.1.8	DisplayString	read-only	The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
ADR cikeTunHistRemoteAddr	1.3.6.1.4.1.9.9.171.1.4.2.1.1.11	IPSIpAddress	read-only	The IP address of the remote endpoint for the IPsec Phase-1 IKE Tunnel.
STR cikeTunHistRemoteName	1.3.6.1.4.1.9.9.171.1.4.2.1.1.12	DisplayString	read-only	The DNS name of the remote IP address of IPsec Phase-1 IKE Tunnel. If the DNS name associated with the remote tunnel endpoint is not known, then the value of this object will be a NULL string.
TIM cikeTunHistStartTime	1.3.6.1.4.1.9.9.171.1.4.2.1.1.19	TimeStamp	read-only	The value of sysUpTime in hundredths of seconds when the IPsec Phase-1 IKE tunnel was started.
INT cikeTunHistTermReason	1.3.6.1.4.1.9.9.171.1.4.2.1.1.2	INTEGER	read-only	The reason the IPsec Phase-1 IKE Tunnel was terminated. Possible reasons include: 1 = other 2 = normal termination 3 = operator request 4 = peer delete request was received 5 = contact with peer was lost 6 = local failure occurred. 7 = operator initiated check point request
C32 cikeTunHistTotalRefreshes	1.3.6.1.4.1.9.9.171.1.4.2.1.1.21	Counter32	read-only	The total number of security associations refreshes performed.
C32 cikeTunHistTotalSas	1.3.6.1.4.1.9.9.171.1.4.2.1.1.22	Counter32	read-only	The total number of security associations used during the life of the IPsec Phase-1 IKE Tunnel.
I32 cikeTunIndex	1.3.6.1.4.1.9.9.171.1.2.3.1.1	Integer32	not-accessible	The index of the IPsec Phase-1 IKE Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
C32 cikeTunInDropPkts	1.3.6.1.4.1.9.9.171.1.2.3.1.21	Counter32	read-only	The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during receive processing.
C32 cikeTunInNotifys	1.3.6.1.4.1.9.9.171.1.2.3.1.22	Counter32	read-only	The total number of notifys received by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunInOctets	1.3.6.1.4.1.9.9.171.1.2.3.1.19	Counter32	read-only	The total number of octets received by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunInP2ExchgInvalids	1.3.6.1.4.1.9.9.171.1.2.3.1.24	Counter32	read-only	The total number of IPsec Phase-2 exchanges received and found to be invalid by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunInP2ExchgRejects	1.3.6.1.4.1.9.9.171.1.2.3.1.25	Counter32	read-only	The total number of IPsec Phase-2 exchanges received and rejected by this IPsec Phase-1 Tunnel.
C32 cikeTunInP2Exchgs	1.3.6.1.4.1.9.9.171.1.2.3.1.23	Counter32	read-only	The total number of IPsec Phase-2 exchanges received by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunInP2SaDelRequests	1.3.6.1.4.1.9.9.171.1.2.3.1.26	Counter32	read-only	The total number of IPsec Phase-2 security association delete requests received by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunInPkts	1.3.6.1.4.1.9.9.171.1.2.3.1.20	Counter32	read-only	The total number of packets received by this IPsec Phase-1 IKE Tunnel.
I32 cikeTunLifeTime	1.3.6.1.4.1.9.9.171.1.2.3.1.15	Integer32	read-only	The negotiated LifeTime of the IPsec Phase-1 IKE Tunnel in seconds.
ADR cikeTunLocalAddr	1.3.6.1.4.1.9.9.171.1.2.3.1.4	IPSIpAddress	read-only	The IP address of the local endpoint for the IPsec Phase-1 IKE Tunnel.
STR cikeTunLocalName	1.3.6.1.4.1.9.9.171.1.2.3.1.5	DisplayString	read-only	The DNS name of the local IP address for the IPsec Phase-1 IKE Tunnel. If the DNS name associated with the local tunnel endpoint is not known, then the value of this object will be a NULL string.
IKE cikeTunLocalType	1.3.6.1.4.1.9.9.171.1.2.3.1.2	IkePeerType	read-only	The type of local peer identity. The local peer may be identified by: 1. an IP address, or 2. a host name.
STR cikeTunLocalValue	1.3.6.1.4.1.9.9.171.1.2.3.1.3	DisplayString	read-only	The value of the local peer identity. If the local peer type is an IP Address, then this is the IP Address used to identify the local peer. If the local peer type is a host name, then this is the host name used to identify the local peer.
IKE cikeTunNegoMode	1.3.6.1.4.1.9.9.171.1.2.3.1.10	IkeNegoMode	read-only	The negotiation mode of the IPsec Phase-1 IKE Tunnel.
cikeTunnelEntry	1.3.6.1.4.1.9.9.171.1.2.3.1		not-accessible	Each entry contains the attributes associated with an active IPsec Phase-1 IKE Tunnel.
cikeTunnelHistEntry	1.3.6.1.4.1.9.9.171.1.4.2.1.1		not-accessible	Each entry contains the attributes associated with a previously active IPsec Phase-1 IKE Tunnel.
cikeTunnelHistTable	1.3.6.1.4.1.9.9.171.1.4.2.1		not-accessible	The IPsec Phase-1 Internet Key Exchange Tunnel History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the cipSecHistTableSize object.
NTF cikeTunnelStart	1.3.6.1.4.1.9.9.171.2.0.1			This notification is generated when an IPsec Phase-1 IKE Tunnel becomes active.
NTF cikeTunnelStop	1.3.6.1.4.1.9.9.171.2.0.2			This notification is generated when an IPsec Phase-1 IKE Tunnel becomes inactive.
cikeTunnelTable	1.3.6.1.4.1.9.9.171.1.2.3		not-accessible	The IPsec Phase-1 Internet Key Exchange Tunnel Table. There is one entry in this table for each active IPsec Phase-1 IKE Tunnel.
C32 cikeTunOutDropPkts	1.3.6.1.4.1.9.9.171.1.2.3.1.29	Counter32	read-only	The total number of packets dropped by this IPsec Phase-1 IKE Tunnel during send processing.
C32 cikeTunOutNotifys	1.3.6.1.4.1.9.9.171.1.2.3.1.30	Counter32	read-only	The total number of notifys sent by this IPsec Phase-1 Tunnel.
C32 cikeTunOutOctets	1.3.6.1.4.1.9.9.171.1.2.3.1.27	Counter32	read-only	The total number of octets sent by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunOutP2ExchgInvalids	1.3.6.1.4.1.9.9.171.1.2.3.1.32	Counter32	read-only	The total number of IPsec Phase-2 exchanges sent and found to be invalid by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunOutP2ExchgRejects	1.3.6.1.4.1.9.9.171.1.2.3.1.33	Counter32	read-only	The total number of IPsec Phase-2 exchanges sent and rejected by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunOutP2Exchgs	1.3.6.1.4.1.9.9.171.1.2.3.1.31	Counter32	read-only	The total number of IPsec Phase-2 exchanges sent by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunOutP2SaDelRequests	1.3.6.1.4.1.9.9.171.1.2.3.1.34	Counter32	read-only	The total number of IPsec Phase-2 security association delete requests sent by this IPsec Phase-1 IKE Tunnel.
C32 cikeTunOutPkts	1.3.6.1.4.1.9.9.171.1.2.3.1.28	Counter32	read-only	The total number of packets sent by this IPsec Phase-1 IKE Tunnel.
ADR cikeTunRemoteAddr	1.3.6.1.4.1.9.9.171.1.2.3.1.8	IPSIpAddress	read-only	The IP address of the remote endpoint for the IPsec Phase-1 IKE Tunnel.
STR cikeTunRemoteName	1.3.6.1.4.1.9.9.171.1.2.3.1.9	DisplayString	read-only	The DNS name of the remote IP address of IPsec Phase-1 IKE Tunnel. If the DNS name associated with the remote tunnel endpoint is not known, then the value of this object will be a NULL string.
IKE cikeTunRemoteType	1.3.6.1.4.1.9.9.171.1.2.3.1.6	IkePeerType	read-only	The type of remote peer identity. The remote peer may be identified by: 1. an IP address, or 2. a host name.
STR cikeTunRemoteValue	1.3.6.1.4.1.9.9.171.1.2.3.1.7	DisplayString	read-only	The value of the remote peer identity. If the remote peer type is an IP Address, then this is the IP Address used to identify the remote peer. If the remote peer type is a host name, then this is the host name used to identify the remote peer.
I32 cikeTunSaRefreshThreshold	1.3.6.1.4.1.9.9.171.1.2.3.1.17	Integer32	read-only	The security association refresh threshold in seconds.
TUN cikeTunStatus	1.3.6.1.4.1.9.9.171.1.2.3.1.35	TunnelStatus	read-write	The status of the MIB table row. This object can be used to bring the tunnel down by setting value of this object to destroy(2). This object cannot be used to create a MIB table row.
C32 cikeTunTotalRefreshes	1.3.6.1.4.1.9.9.171.1.2.3.1.18	Counter32	read-only	The total number of security associations refreshes performed.
NTF cipSecEarlyTunTerm	1.3.6.1.4.1.9.9.171.2.0.11			This notification is generated when an an IPsec Phase-2 Tunnel is terminated earily or before expected.
cipSecEndPtEntry	1.3.6.1.4.1.9.9.171.1.3.3.1		not-accessible	An IPsec Phase-2 Tunnel Endpoint entry.
I32 cipSecEndPtHistActiveIndex	1.3.6.1.4.1.9.9.171.1.4.3.2.1.3	Integer32	read-only	The index of the previously active Endpoint.
cipSecEndPtHistEntry	1.3.6.1.4.1.9.9.171.1.4.3.2.1		not-accessible	Each entry contains the attributes associated with a previously active IPsec Phase-2 Tunnel Endpoint.
I32 cipSecEndPtHistIndex	1.3.6.1.4.1.9.9.171.1.4.3.2.1.1	Integer32	not-accessible	The number of the previously active Endpoint associated with a IPsec Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Endpoint associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647.
ADR cipSecEndPtHistLocalAddr1	1.3.6.1.4.1.9.9.171.1.4.3.2.1.6	IPSIpAddress	read-only	The local Endpoint's first IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet. If the local Endpoint type is IP address range, then this is the value of beginning IP address of the range.
ADR cipSecEndPtHistLocalAddr2	1.3.6.1.4.1.9.9.171.1.4.3.2.1.7	IPSIpAddress	read-only	The local Endpoint's second IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet mask. If the local Endpoint type is IP address range, then this is the value of ending IP address of the range.
STR cipSecEndPtHistLocalName	1.3.6.1.4.1.9.9.171.1.4.3.2.1.4	DisplayString	read-only	The DNS name of the local Endpoint.
I32 cipSecEndPtHistLocalPort	1.3.6.1.4.1.9.9.171.1.4.3.2.1.9	Integer32	read-only	The port number of the local Endpoint's traffic.
I32 cipSecEndPtHistLocalProtocol	1.3.6.1.4.1.9.9.171.1.4.3.2.1.8	Integer32	read-only	The protocol number of the local Endpoint's traffic.
END cipSecEndPtHistLocalType	1.3.6.1.4.1.9.9.171.1.4.3.2.1.5	EndPtType	read-only	The type of identity for the local Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
ADR cipSecEndPtHistRemoteAddr1	1.3.6.1.4.1.9.9.171.1.4.3.2.1.12	IPSIpAddress	read-only	The remote Endpoint's first IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet. If the remote Endpoint type is IP address range, then this is the value of beginning IP address of the range.
ADR cipSecEndPtHistRemoteAddr2	1.3.6.1.4.1.9.9.171.1.4.3.2.1.13	IPSIpAddress	read-only	The remote Endpoint's second IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet mask. If the remote Endpoint type is IP address range, then this is the value of ending IP address of the range.
STR cipSecEndPtHistRemoteName	1.3.6.1.4.1.9.9.171.1.4.3.2.1.10	DisplayString	read-only	The DNS name of the remote Endpoint.
I32 cipSecEndPtHistRemotePort	1.3.6.1.4.1.9.9.171.1.4.3.2.1.15	Integer32	read-only	The port number of the remote Endpoint's traffic.
I32 cipSecEndPtHistRemoteProtocol	1.3.6.1.4.1.9.9.171.1.4.3.2.1.14	Integer32	read-only	The protocol number of the remote Endpoint's traffic.
END cipSecEndPtHistRemoteType	1.3.6.1.4.1.9.9.171.1.4.3.2.1.11	EndPtType	read-only	The type of identity for the remote Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
cipSecEndPtHistTable	1.3.6.1.4.1.9.9.171.1.4.3.2		not-accessible	The IPsec Phase-2 Tunnel Endpoint History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the cipSecHistTableSize object.
I32 cipSecEndPtHistTunIndex	1.3.6.1.4.1.9.9.171.1.4.3.2.1.2	Integer32	read-only	The index of the previously active IPsec Phase-2 Tunnel Table.
I32 cipSecEndPtIndex	1.3.6.1.4.1.9.9.171.1.3.3.1.1	Integer32	not-accessible	The number of the Endpoint associated with the IPsec Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each Endpoint associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647.
ADR cipSecEndPtLocalAddr1	1.3.6.1.4.1.9.9.171.1.3.3.1.4	IPSIpAddress	read-only	The local Endpoint's first IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet. If the local Endpoint type is IP address range, then this is the value of beginning IP address of the range.
ADR cipSecEndPtLocalAddr2	1.3.6.1.4.1.9.9.171.1.3.3.1.5	IPSIpAddress	read-only	The local Endpoint's second IP address specification. If the local Endpoint type is single IP address, then this is the value of the IP address. If the local Endpoint type is IP subnet, then this is the value of the subnet mask. If the local Endpoint type is IP address range, then this is the value of ending IP address of the range.
STR cipSecEndPtLocalName	1.3.6.1.4.1.9.9.171.1.3.3.1.2	DisplayString	read-only	The DNS name of the local Endpoint.
I32 cipSecEndPtLocalPort	1.3.6.1.4.1.9.9.171.1.3.3.1.7	Integer32	read-only	The port number of the local Endpoint's traffic.
I32 cipSecEndPtLocalProtocol	1.3.6.1.4.1.9.9.171.1.3.3.1.6	Integer32	read-only	The protocol number of the local Endpoint's traffic.
END cipSecEndPtLocalType	1.3.6.1.4.1.9.9.171.1.3.3.1.3	EndPtType	read-only	The type of identity for the local Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
ADR cipSecEndPtRemoteAddr1	1.3.6.1.4.1.9.9.171.1.3.3.1.10	IPSIpAddress	read-only	The remote Endpoint's first IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet. If the remote Endpoint type is IP address range, then this is the value of beginning IP address of the range.
ADR cipSecEndPtRemoteAddr2	1.3.6.1.4.1.9.9.171.1.3.3.1.11	IPSIpAddress	read-only	The remote Endpoint's second IP address specification. If the remote Endpoint type is single IP address, then this is the value of the IP address. If the remote Endpoint type is IP subnet, then this is the value of the subnet mask. If the remote Endpoint type is IP address range, then this is the value of ending IP address of the range.
STR cipSecEndPtRemoteName	1.3.6.1.4.1.9.9.171.1.3.3.1.8	DisplayString	read-only	The DNS name of the remote Endpoint.
I32 cipSecEndPtRemotePort	1.3.6.1.4.1.9.9.171.1.3.3.1.13	Integer32	read-only	The port number of the remote Endpoint's traffic.
I32 cipSecEndPtRemoteProtocol	1.3.6.1.4.1.9.9.171.1.3.3.1.12	Integer32	read-only	The protocol number of the remote Endpoint's traffic.
END cipSecEndPtRemoteType	1.3.6.1.4.1.9.9.171.1.3.3.1.9	EndPtType	read-only	The type of identity for the remote Endpoint. Possible values are: 1) a single IP address, or 2) an IP address range, or 3) an IP subnet.
cipSecEndPtTable	1.3.6.1.4.1.9.9.171.1.3.3		not-accessible	The IPsec Phase-2 Tunnel Endpoint Table. This table contains an entry for each active endpoint associated with an IPsec Phase-2 Tunnel.
cipSecFailEntry	1.3.6.1.4.1.9.9.171.1.5.3.1.1		not-accessible	Each entry contains the attributes associated with an IPsec Phase-1 failure.
cipSecFailGlobal	1.3.6.1.4.1.9.9.171.1.5.1
cipSecFailGlobalCntl	1.3.6.1.4.1.9.9.171.1.5.1.1
I32 cipSecFailIndex	1.3.6.1.4.1.9.9.171.1.5.3.1.1.1	Integer32	not-accessible	The IPsec Phase-2 Failure Table index. The value of the index is a number which begins at one and is incremented with each IPsec Phase-1 failure. The value of this object will wrap at 2,147,483,647.
cipSecFailPhaseOne	1.3.6.1.4.1.9.9.171.1.5.2
cipSecFailPhaseTwo	1.3.6.1.4.1.9.9.171.1.5.3
ADR cipSecFailPktDstAddr	1.3.6.1.4.1.9.9.171.1.5.3.1.1.7	IPSIpAddress	read-only	The packet's destination IP address.
ADR cipSecFailPktSrcAddr	1.3.6.1.4.1.9.9.171.1.5.3.1.1.6	IPSIpAddress	read-only	The packet's source IP address.
INT cipSecFailReason	1.3.6.1.4.1.9.9.171.1.5.3.1.1.2	INTEGER	read-only	The reason for the failure. Possible reasons include: 1 = other 2 = internal error occurred 3 = peer encoding error 4 = proposal failure 5 = protocol use failure 6 = non-existent security association 7 = decryption failure 8 = encryption failure 9 = inbound authentication failure 10 = outbound authentication failure 11 = compression failure 12 = system capacity failure 13 = peer delete request was received 14 = contact with peer was lost 15 = sequence number rolled over 16 = operator requested termination.
I32 cipSecFailSaSpi	1.3.6.1.4.1.9.9.171.1.5.3.1.1.5	Integer32	read-only	The security association SPI value.
cipSecFailTable	1.3.6.1.4.1.9.9.171.1.5.3.1		not-accessible	The IPsec Phase-2 Failure Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the cipSecFailTableSize object.
I32 cipSecFailTableSize	1.3.6.1.4.1.9.9.171.1.5.1.1.1	Integer32	read-write	The window size of the IPsec Phase-1 and Phase-2 Failure Tables. The IPsec Phase-1 and Phase-2 Failure Tables are implemented as a sliding window in which only the last n entries are maintained. This object is used specify the number of entries which will be maintained in the IPsec Phase-1 and Phase-2 Failure Tables. An implementation may choose suitable minimum and maximum values for this element based on the local policy and available resources. If an SNMP SET request specifies a value outside this window for this element, a BAD VALUE may be returned.
TIM cipSecFailTime	1.3.6.1.4.1.9.9.171.1.5.3.1.1.3	TimeStamp	read-only	The value of sysUpTime in hundredths of seconds at the time of the failure.
I32 cipSecFailTunnelIndex	1.3.6.1.4.1.9.9.171.1.5.3.1.1.4	Integer32	read-only	The Phase-2 Tunnel index (cipSecTunIndex).
cipSecFailures	1.3.6.1.4.1.9.9.171.1.5
cipSecFailuresGroup	1.3.6.1.4.1.9.9.171.3.1.5			This group consists of: 1) IPsec Failure Global Objects 2) IPsec Phase-1 Tunnel Failure Table 3) IPsec Phase-2 Tunnel Failure Table
G32 cipSecGlobalActiveTunnels	1.3.6.1.4.1.9.9.171.1.3.1.1	Gauge32	read-only	The total number of currently active IPsec Phase-2 Tunnels.
C64 cipSecGlobalHcInDecompOctets	1.3.6.1.4.1.9.9.171.1.3.1.7	Counter64	read-only	A high capacity count of the total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecGlobalHcInOctets.
C64 cipSecGlobalHcInOctets	1.3.6.1.4.1.9.9.171.1.3.1.4	Counter64	read-only	A high capacity count of the total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
C64 cipSecGlobalHcOutOctets	1.3.6.1.4.1.9.9.171.1.3.1.17	Counter64	read-only	A high capacity count of the total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed.
C64 cipSecGlobalHcOutUncompOctets	1.3.6.1.4.1.9.9.171.1.3.1.20	Counter64	read-only	A high capacity count of the total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecGlobalHcOutOctets.
C32 cipSecGlobalInAuthFails	1.3.6.1.4.1.9.9.171.1.3.1.13	Counter32	read-only	The total number of inbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecGlobalInAuths	1.3.6.1.4.1.9.9.171.1.3.1.12	Counter32	read-only	The total number of inbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecGlobalInDecompOctets	1.3.6.1.4.1.9.9.171.1.3.1.6	Counter32	read-only	The total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecGlobalInOctets. See also cipSecGlobalInDecompOctWraps for the number of times this counter has wrapped.
C32 cipSecGlobalInDecompOctWraps	1.3.6.1.4.1.9.9.171.1.3.1.8	Counter32	read-only	The number of times the global decompressed octets received counter (cipSecGlobalInDecompOctets) has wrapped.
C32 cipSecGlobalInDecryptFails	1.3.6.1.4.1.9.9.171.1.3.1.15	Counter32	read-only	The total number of inbound decryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecGlobalInDecrypts	1.3.6.1.4.1.9.9.171.1.3.1.14	Counter32	read-only	The total number of inbound decryption's performed by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecGlobalInDrops	1.3.6.1.4.1.9.9.171.1.3.1.10	Counter32	read-only	The total number of packets dropped during receive processing by all current and previous IPsec Phase-2 Tunnels. This count does NOT include packets dropped due to Anti-Replay processing.
C32 cipSecGlobalInOctets	1.3.6.1.4.1.9.9.171.1.3.1.3	Counter32	read-only	The total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also cipSecGlobalInOctWraps for the number of times this counter has wrapped.
C32 cipSecGlobalInOctWraps	1.3.6.1.4.1.9.9.171.1.3.1.5	Counter32	read-only	The number of times the global octets received counter (cipSecGlobalInOctets) has wrapped.
C32 cipSecGlobalInPkts	1.3.6.1.4.1.9.9.171.1.3.1.9	Counter32	read-only	The total number of packets received by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecGlobalInReplayDrops	1.3.6.1.4.1.9.9.171.1.3.1.11	Counter32	read-only	The total number of packets dropped during receive processing due to Anti-Replay processing by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecGlobalNoSaFails	1.3.6.1.4.1.9.9.171.1.3.1.29	Counter32	read-only	The total number of non-existent Security Association in failures which occurred during processing of all current and previous IPsec Phase-2 Tunnels.
C32 cipSecGlobalOutAuthFails	1.3.6.1.4.1.9.9.171.1.3.1.25	Counter32	read-only	The total number of outbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecGlobalOutAuths	1.3.6.1.4.1.9.9.171.1.3.1.24	Counter32	read-only	The total number of outbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecGlobalOutDrops	1.3.6.1.4.1.9.9.171.1.3.1.23	Counter32	read-only	The total number of packets dropped during send processing by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecGlobalOutEncryptFails	1.3.6.1.4.1.9.9.171.1.3.1.27	Counter32	read-only	The total number of outbound encryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecGlobalOutEncrypts	1.3.6.1.4.1.9.9.171.1.3.1.26	Counter32	read-only	The total number of outbound encryption's performed by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecGlobalOutOctets	1.3.6.1.4.1.9.9.171.1.3.1.16	Counter32	read-only	The total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed. See also cipSecGlobalOutOctWraps for the number of times this counter has wrapped.
C32 cipSecGlobalOutOctWraps	1.3.6.1.4.1.9.9.171.1.3.1.18	Counter32	read-only	The number of times the global octets sent counter (cipSecGlobalOutOctets) has wrapped.
C32 cipSecGlobalOutPkts	1.3.6.1.4.1.9.9.171.1.3.1.22	Counter32	read-only	The total number of packets sent by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecGlobalOutUncompOctets	1.3.6.1.4.1.9.9.171.1.3.1.19	Counter32	read-only	The total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecGlobalOutOctets. See also cipSecGlobalOutDecompOctWraps for the number of times this counter has wrapped.
C32 cipSecGlobalOutUncompOctWraps	1.3.6.1.4.1.9.9.171.1.3.1.21	Counter32	read-only	The number of times the global uncompressed octets sent counter (cipSecGlobalOutUncompOctets) has wrapped.
C32 cipSecGlobalPreviousTunnels	1.3.6.1.4.1.9.9.171.1.3.1.2	Counter32	read-only	The total number of previously active IPsec Phase-2 Tunnels.
C32 cipSecGlobalProtocolUseFails	1.3.6.1.4.1.9.9.171.1.3.1.28	Counter32	read-only	The total number of protocol use failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.
cipSecGlobalStats	1.3.6.1.4.1.9.9.171.1.3.1
C32 cipSecGlobalSysCapFails	1.3.6.1.4.1.9.9.171.1.3.1.30	Counter32	read-only	The total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.
cipSecGWStatsGroup	1.3.6.1.4.1.9.9.171.3.1.8
INT cipSecHistCheckPoint	1.3.6.1.4.1.9.9.171.1.4.1.1.2	INTEGER	read-write	The current state of check point processing. This object will return ready when the agent is ready to create on-demand history entries for active IPsec Tunnels or checkPoint when the agent is currently creating on-demand history entries for active IPsec Tunnels. By setting this value to checkPoint, the agent will create: a) an entry in the IPsec Phase-1 Tunnel History for each active IPsec Phase-1 Tunnel and b) an entry in the IPsec Phase-2 Tunnel History Table and an entry in the IPsec Phase-2 Tunnel EndPoint History Table for each active IPsec Phase-2 Tunnel.
cipSecHistGlobal	1.3.6.1.4.1.9.9.171.1.4.1
cipSecHistGlobalCntl	1.3.6.1.4.1.9.9.171.1.4.1.1
cipSecHistory	1.3.6.1.4.1.9.9.171.1.4
cipSecHistoryGroup	1.3.6.1.4.1.9.9.171.3.1.4			This group consists of: 1) IPsec History Global Objects 2) IPsec Phase-1 History Objects 3) IPsec Phase-2 History Objects
cipSecHistPhaseOne	1.3.6.1.4.1.9.9.171.1.4.2
cipSecHistPhaseTwo	1.3.6.1.4.1.9.9.171.1.4.3
I32 cipSecHistTableSize	1.3.6.1.4.1.9.9.171.1.4.1.1.1	Integer32	read-write	The window size of the IPsec Phase-1 and Phase-2 History Tables. The IPsec Phase-1 and Phase-2 History Tables are implemented as a sliding window in which only the last n entries are maintained. This object is used specify the number of entries which will be maintained in the IPsec Phase-1 and Phase-2 History Tables. An implementation may choose suitable minimum and maximum values for this element based on the local policy and available resources. If an SNMP SET request specifies a value outside this window for this element, a BAD VALUE may be returned.
cipSecLevels	1.3.6.1.4.1.9.9.171.1.1
cipSecLevelsGroup	1.3.6.1.4.1.9.9.171.3.1.1			This group consists of a: 1) IPsec MIB Level
cipSecMIBCompliance	1.3.6.1.4.1.9.9.171.3.2.1			The compliance statement for SNMP entities the IP Security Protocol. This has been replaced by cipSecMIBComplianceRev1.
cipSecMIBComplianceRev1	1.3.6.1.4.1.9.9.171.3.2.2			The compliance statement for SNMP entities the IP Security Protocol.
cipSecMIBCompliances	1.3.6.1.4.1.9.9.171.3.2
cipSecMIBConformance	1.3.6.1.4.1.9.9.171.3
cipSecMIBGroups	1.3.6.1.4.1.9.9.171.3.1
I32 cipSecMibLevel	1.3.6.1.4.1.9.9.171.1.1.1	Integer32	read-only	The level of the IPsec MIB.
cipSecMIBNotificationPrefix	1.3.6.1.4.1.9.9.171.2
cipSecMIBNotifications	1.3.6.1.4.1.9.9.171.2.0
cipSecMIBObjects	1.3.6.1.4.1.9.9.171.1
NTF cipSecNoSa	1.3.6.1.4.1.9.9.171.2.0.13			This notification is generated when the processing for an IPsec Phase-2 Tunnel experiences a non-existent security association error.
cipSecNotificationGroup	1.3.6.1.4.1.9.9.171.3.1.7			This group contains the notifications for the IPsec MIB.
G32 cipSecPhase2GWActiveTunnels	1.3.6.1.4.1.9.9.171.1.3.5.1.1	Gauge32	read-only	The total number of currently active IPsec Phase-2 Tunnels.
C32 cipSecPhase2GWInAuthFails	1.3.6.1.4.1.9.9.171.1.3.5.1.11	Counter32	read-only	The total number of inbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecPhase2GWInAuths	1.3.6.1.4.1.9.9.171.1.3.5.1.10	Counter32	read-only	The total number of inbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecPhase2GWInDecompOctets	1.3.6.1.4.1.9.9.171.1.3.5.1.5	Counter32	read-only	The total number of decompressed octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecGlobalInOctets. See also cipSecGlobalInDecompOctWraps for the number of times this counter has wrapped.
C32 cipSecPhase2GWInDecompOctWraps	1.3.6.1.4.1.9.9.171.1.3.5.1.6	Counter32	read-only	The number of times the global decompressed octets received counter (cipSecGlobalInDecompOctets) has wrapped.
C32 cipSecPhase2GWInDecryptFails	1.3.6.1.4.1.9.9.171.1.3.5.1.13	Counter32	read-only	The total number of inbound decryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecPhase2GWInDecrypts	1.3.6.1.4.1.9.9.171.1.3.5.1.12	Counter32	read-only	The total number of inbound decryption's performed by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecPhase2GWInDrops	1.3.6.1.4.1.9.9.171.1.3.5.1.8	Counter32	read-only	The total number of packets dropped during receive processing by all current and previous IPsec Phase-2 Tunnels. This count does NOT include packets dropped due to Anti-Replay processing.
C32 cipSecPhase2GWInOctets	1.3.6.1.4.1.9.9.171.1.3.5.1.3	Counter32	read-only	The total number of octets received by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also cipSecGlobalInOctWraps for the number of times this counter has wrapped.
C32 cipSecPhase2GWInOctWraps	1.3.6.1.4.1.9.9.171.1.3.5.1.4	Counter32	read-only	The number of times the global octets received counter (cipSecGlobalInOctets) has wrapped.
C32 cipSecPhase2GWInPkts	1.3.6.1.4.1.9.9.171.1.3.5.1.7	Counter32	read-only	The total number of packets received by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecPhase2GWInReplayDrops	1.3.6.1.4.1.9.9.171.1.3.5.1.9	Counter32	read-only	The total number of packets dropped during receive processing due to Anti-Replay processing by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecPhase2GWNoSaFails	1.3.6.1.4.1.9.9.171.1.3.5.1.25	Counter32	read-only	The total number of non-existent Security Association in failures which occurred during processing of all current and previous IPsec Phase-2 Tunnels.
C32 cipSecPhase2GWOutAuthFails	1.3.6.1.4.1.9.9.171.1.3.5.1.21	Counter32	read-only	The total number of outbound authentication's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecPhase2GWOutAuths	1.3.6.1.4.1.9.9.171.1.3.5.1.20	Counter32	read-only	The total number of outbound authentication's performed by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecPhase2GWOutDrops	1.3.6.1.4.1.9.9.171.1.3.5.1.19	Counter32	read-only	The total number of packets dropped during send processing by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecPhase2GWOutEncryptFails	1.3.6.1.4.1.9.9.171.1.3.5.1.23	Counter32	read-only	The total number of outbound encryption's which ended in failure by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecPhase2GWOutEncrypts	1.3.6.1.4.1.9.9.171.1.3.5.1.22	Counter32	read-only	The total number of outbound encryption's performed by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecPhase2GWOutOctets	1.3.6.1.4.1.9.9.171.1.3.5.1.14	Counter32	read-only	The total number of octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated AFTER determining whether or not the packet should be compressed. See also cipSecGlobalOutOctWraps for the number of times this counter has wrapped.
C32 cipSecPhase2GWOutOctWraps	1.3.6.1.4.1.9.9.171.1.3.5.1.15	Counter32	read-only	The number of times the global octets sent counter (cipSecGlobalOutOctets) has wrapped.
C32 cipSecPhase2GWOutPkts	1.3.6.1.4.1.9.9.171.1.3.5.1.18	Counter32	read-only	The total number of packets sent by all current and previous IPsec Phase-2 Tunnels.
C32 cipSecPhase2GWOutUncompOctets	1.3.6.1.4.1.9.9.171.1.3.5.1.16	Counter32	read-only	The total number of uncompressed octets sent by all current and previous IPsec Phase-2 Tunnels. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecGlobalOutOctets. See also cipSecGlobalOutDecompOctWraps for the number of times this counter has wrapped.
C32 cipSecPhase2GWOutUncompOctWraps	1.3.6.1.4.1.9.9.171.1.3.5.1.17	Counter32	read-only	The number of times the global uncompressed octets sent counter (cipSecGlobalOutUncompOctets) has wrapped.
C32 cipSecPhase2GWPreviousTunnels	1.3.6.1.4.1.9.9.171.1.3.5.1.2	Counter32	read-only	The total number of previously active IPsec Phase-2 Tunnels.
C32 cipSecPhase2GWProtocolUseFails	1.3.6.1.4.1.9.9.171.1.3.5.1.24	Counter32	read-only	The total number of protocol use failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.
cipSecPhase2GWStatsEntry	1.3.6.1.4.1.9.9.171.1.3.5.1		not-accessible	Each entry contains the attributes of an Phase-2 IPsec stats information for the related gateway. There is only one entry for each gateway. The entry is created when a gateway up and cannot be deleted.
cipSecPhase2GWStatsTable	1.3.6.1.4.1.9.9.171.1.3.5		not-accessible	Phase-2 IPsec stats information is included in this table. Each entry is related to a specific gateway which is identified by 'cmgwIndex'
C32 cipSecPhase2GWSysCapFails	1.3.6.1.4.1.9.9.171.1.3.5.1.26	Counter32	read-only	The total number of system capacity failures which occurred during processing of all current and previously active IPsec Phase-2 Tunnels.
cipSecPhaseOne	1.3.6.1.4.1.9.9.171.1.2
cipSecPhaseOneGroup	1.3.6.1.4.1.9.9.171.3.1.2			This group consists of: 1) IPsec Phase-1 Global Objects 2) IPsec Phase-1 Peer Table 3) IPsec Phase-1 Tunnel Table 4) IPsec Phase-1 Correlation Table
cipSecPhaseTwo	1.3.6.1.4.1.9.9.171.1.3
cipSecPhaseTwoGroup	1.3.6.1.4.1.9.9.171.3.1.3			This group consists of: 1) IPsec Phase-2 Global Statistics 2) IPsec Phase-2 Tunnel Table 3) IPsec Phase-2 Endpoint Table 4) IPsec Phase-2 Security Protection Index Table
NTF cipSecProtocolFailure	1.3.6.1.4.1.9.9.171.2.0.12			This notification is generated when the processing for an IPsec Phase-2 Tunnel experiences a protocol related error.
NTF cipSecSetUpFailure	1.3.6.1.4.1.9.9.171.2.0.10			This notification is generated when the setup for an IPsec Phase-2 Tunnel fails.
INT cipSecSpiDirection	1.3.6.1.4.1.9.9.171.1.3.4.1.2	INTEGER	read-only	The direction of the SPI.
cipSecSpiEntry	1.3.6.1.4.1.9.9.171.1.3.4.1		not-accessible	Each entry contains the attributes associated with active and expiring IPsec Phase-2 security associations.
I32 cipSecSpiIndex	1.3.6.1.4.1.9.9.171.1.3.4.1.1	Integer32	not-accessible	The number of the SPI associated with the Phase-2 Tunnel Table. The value of this index is a number which begins at one and is incremented with each SPI associated with an IPsec Phase-2 Tunnel. The value of this object will wrap at 2,147,483,647.
INT cipSecSpiProtocol	1.3.6.1.4.1.9.9.171.1.3.4.1.4	INTEGER	read-only	The protocol of the SPI.
INT cipSecSpiStatus	1.3.6.1.4.1.9.9.171.1.3.4.1.5	INTEGER	read-only	The status of the SPI.
cipSecSpiTable	1.3.6.1.4.1.9.9.171.1.3.4		not-accessible	The IPsec Phase-2 Security Protection Index Table. This table contains an entry for each active and expiring security association.
U32 cipSecSpiValue	1.3.6.1.4.1.9.9.171.1.3.4.1.3	Unsigned32	read-only	The value of the SPI.
NTF cipSecSysFailure	1.3.6.1.4.1.9.9.171.2.0.9			This notification is generated when the processing for an IPsec Phase-2 Tunnel experiences an internal or system capacity error.
cipSecTrapCntl	1.3.6.1.4.1.9.9.171.1.6
cipSecTrapCntlGroup	1.3.6.1.4.1.9.9.171.3.1.6			This group of objects controls the sending of IPsec TRAPs.
TRA cipSecTrapCntlIkeCertCrlFailure	1.3.6.1.4.1.9.9.171.1.6.4	TrapStatus	read-write	This object defines the administrative state of sending the IPsec IKE Phase-1 Certificate/CRL Failure TRAP
TRA cipSecTrapCntlIkeNoSa	1.3.6.1.4.1.9.9.171.1.6.6	TrapStatus	read-write	This object defines the administrative state of sending the IPsec IKE Phase-1 No Security Association TRAP
TRA cipSecTrapCntlIkeProtocolFail	1.3.6.1.4.1.9.9.171.1.6.5	TrapStatus	read-write	This object defines the administrative state of sending the IPsec IKE Phase-1 Protocol Failure TRAP
TRA cipSecTrapCntlIkeSysFailure	1.3.6.1.4.1.9.9.171.1.6.3	TrapStatus	read-write	This object defines the administrative state of sending the IPsec IKE Phase-1 System Failure TRAP
TRA cipSecTrapCntlIkeTunnelStart	1.3.6.1.4.1.9.9.171.1.6.1	TrapStatus	read-write	This object defines the administrative state of sending the IPsec IKE Phase-1 Tunnel Start TRAP
TRA cipSecTrapCntlIkeTunnelStop	1.3.6.1.4.1.9.9.171.1.6.2	TrapStatus	read-write	This object defines the administrative state of sending the IPsec IKE Phase-1 Tunnel Stop TRAP
TRA cipSecTrapCntlIpSecEarlyTunTerm	1.3.6.1.4.1.9.9.171.1.6.11	TrapStatus	read-write	This object defines the administrative state of sending the IPsec Phase-2 Early Tunnel Termination TRAP
TRA cipSecTrapCntlIpSecNoSa	1.3.6.1.4.1.9.9.171.1.6.13	TrapStatus	read-write	This object defines the administrative state of sending the IPsec Phase-2 No Security Association TRAP
TRA cipSecTrapCntlIpSecProtocolFail	1.3.6.1.4.1.9.9.171.1.6.12	TrapStatus	read-write	This object defines the administrative state of sending the IPsec Phase-2 Protocol Failure TRAP
TRA cipSecTrapCntlIpSecSetUpFailure	1.3.6.1.4.1.9.9.171.1.6.10	TrapStatus	read-write	This object defines the administrative state of sending the IPsec Phase-2 Set Up Failure TRAP
TRA cipSecTrapCntlIpSecSysFailure	1.3.6.1.4.1.9.9.171.1.6.9	TrapStatus	read-write	This object defines the administrative state of sending the IPsec Phase-2 System Failure TRAP
TRA cipSecTrapCntlIpSecTunnelStart	1.3.6.1.4.1.9.9.171.1.6.7	TrapStatus	read-write	This object defines the administrative state of sending the IPsec Phase-2 Tunnel Start TRAP
TRA cipSecTrapCntlIpSecTunnelStop	1.3.6.1.4.1.9.9.171.1.6.8	TrapStatus	read-write	This object defines the administrative state of sending the IPsec Phase-2 Tunnel Stop TRAP
NUM cipSecTunActiveTime	1.3.6.1.4.1.9.9.171.1.3.2.1.10	TimeInterval	read-only	The length of time the IPsec Phase-2 Tunnel has been active in hundredths of seconds.
G32 cipSecTunCurrentSaInstances	1.3.6.1.4.1.9.9.171.1.3.2.1.15	Gauge32	read-only	The number of security associations which are currently active or expiring.
ENC cipSecTunEncapMode	1.3.6.1.4.1.9.9.171.1.3.2.1.7	EncapMode	read-only	The encapsulation mode used by the IPsec Phase-2 Tunnel.
C32 cipSecTunExpiredSaInstances	1.3.6.1.4.1.9.9.171.1.3.2.1.14	Counter32	read-only	The total number of security associations which have expired.
C64 cipSecTunHcInDecompOctets	1.3.6.1.4.1.9.9.171.1.3.2.1.30	Counter64	read-only	A high capacity count of the total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecTunHcInOctets.
C64 cipSecTunHcInOctets	1.3.6.1.4.1.9.9.171.1.3.2.1.27	Counter64	read-only	A high capacity count of the total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
C64 cipSecTunHcOutOctets	1.3.6.1.4.1.9.9.171.1.3.2.1.40	Counter64	read-only	A high capacity count of the total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.
C64 cipSecTunHcOutUncompOctets	1.3.6.1.4.1.9.9.171.1.3.2.1.43	Counter64	read-only	A high capacity count of the total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecTunHcOutOctets.
I32 cipSecTunHistActiveIndex	1.3.6.1.4.1.9.9.171.1.4.3.1.1.3	Integer32	read-only	The index of the previously active IPsec Phase-2 Tunnel.
NUM cipSecTunHistActiveTime	1.3.6.1.4.1.9.9.171.1.4.3.1.1.12	TimeInterval	read-only	The length of time the IPsec Phase-2 Tunnel has been active in hundredths of seconds.
ENC cipSecTunHistEncapMode	1.3.6.1.4.1.9.9.171.1.4.3.1.1.8	EncapMode	read-only	The encapsulation mode used by the IPsec Phase-2 Tunnel.
C64 cipSecTunHistHcInDecompOctets	1.3.6.1.4.1.9.9.171.1.4.3.1.1.29	Counter64	read-only	A high capacity count of the total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecTunHistHcInOctets.
C64 cipSecTunHistHcInOctets	1.3.6.1.4.1.9.9.171.1.4.3.1.1.26	Counter64	read-only	A high capacity count of the total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed.
C64 cipSecTunHistHcOutOctets	1.3.6.1.4.1.9.9.171.1.4.3.1.1.39	Counter64	read-only	A high capacity count of the total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed.
C64 cipSecTunHistHcOutUncompOctets	1.3.6.1.4.1.9.9.171.1.4.3.1.1.42	Counter64	read-only	A high capacity count of the total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecTunHistHcOutOctets.
I32 cipSecTunHistIkeTunnelIndex	1.3.6.1.4.1.9.9.171.1.4.3.1.1.4	Integer32	read-only	The index of the associated IPsec Phase-1 Tunnel (cikeTunIndex in the cikeTunnelTable).
C32 cipSecTunHistInAuthFails	1.3.6.1.4.1.9.9.171.1.4.3.1.1.35	Counter32	read-only	The total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel .
C32 cipSecTunHistInAuths	1.3.6.1.4.1.9.9.171.1.4.3.1.1.34	Counter32	read-only	The total number of inbound authentication's performed by this IPsec Phase-2 Tunnel.
C32 cipSecTunHistInDecompOctets	1.3.6.1.4.1.9.9.171.1.4.3.1.1.28	Counter32	read-only	The total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecTunHistInOctets. See also cipSecTunInDecompOctWraps for the number of times this counter has wrapped.
C32 cipSecTunHistInDecompOctWraps	1.3.6.1.4.1.9.9.171.1.4.3.1.1.30	Counter32	read-only	The number of times the decompressed octets received counter (cipSecTunInDecompOctets) has wrapped.
C32 cipSecTunHistInDecryptFails	1.3.6.1.4.1.9.9.171.1.4.3.1.1.37	Counter32	read-only	The total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel.
C32 cipSecTunHistInDecrypts	1.3.6.1.4.1.9.9.171.1.4.3.1.1.36	Counter32	read-only	The total number of inbound decryption's performed by this IPsec Phase-2 Tunnel.
I32 cipSecTunHistIndex	1.3.6.1.4.1.9.9.171.1.4.3.1.1.1	Integer32	not-accessible	The index of the IPsec Phase-2 Tunnel History Table. The value of the index is a number which begins at one and is incremented with each tunnel that ends. The value of this object will wrap at 2,147,483,647.
C32 cipSecTunHistInDropPkts	1.3.6.1.4.1.9.9.171.1.4.3.1.1.32	Counter32	read-only	The total number of packets dropped during receive processing by this IPsec Phase-2 Tunnel. This count does NOT include packets dropped due to Anti-Replay processing.
C32 cipSecTunHistInOctets	1.3.6.1.4.1.9.9.171.1.4.3.1.1.25	Counter32	read-only	The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also cipSecTunInOctWraps for the number of times this counter has wrapped.
C32 cipSecTunHistInOctWraps	1.3.6.1.4.1.9.9.171.1.4.3.1.1.27	Counter32	read-only	The number of times the octets received counter (cipSecTunInOctets) has wrapped.
C32 cipSecTunHistInPkts	1.3.6.1.4.1.9.9.171.1.4.3.1.1.31	Counter32	read-only	The total number of packets received by this IPsec Phase-2 Tunnel.
C32 cipSecTunHistInReplayDropPkts	1.3.6.1.4.1.9.9.171.1.4.3.1.1.33	Counter32	read-only	The total number of packets dropped during receive processing due to Anti-Replay processing by this IPsec Phase-2 Tunnel.
AUT cipSecTunHistInSaAhAuthAlgo	1.3.6.1.4.1.9.9.171.1.4.3.1.1.17	AuthAlgo	read-only	The authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.
COM cipSecTunHistInSaDecompAlgo	1.3.6.1.4.1.9.9.171.1.4.3.1.1.19	CompAlgo	read-only	The decompression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
DIF cipSecTunHistInSaDiffHellmanGrp	1.3.6.1.4.1.9.9.171.1.4.3.1.1.15	DiffHellmanGrp	read-only	The Diffie Hellman Group used by the inbound security association of the IPsec Phase-2 Tunnel.
ENC cipSecTunHistInSaEncryptAlgo	1.3.6.1.4.1.9.9.171.1.4.3.1.1.16	EncryptAlgo	read-only	The encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
AUT cipSecTunHistInSaEspAuthAlgo	1.3.6.1.4.1.9.9.171.1.4.3.1.1.18	AuthAlgo	read-only	The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.
KEY cipSecTunHistKeyType	1.3.6.1.4.1.9.9.171.1.4.3.1.1.7	KeyType	read-only	The type of key used by the IPsec Phase-2 Tunnel.
I32 cipSecTunHistLifeSize	1.3.6.1.4.1.9.9.171.1.4.3.1.1.9	Integer32	read-only	The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes.
I32 cipSecTunHistLifeTime	1.3.6.1.4.1.9.9.171.1.4.3.1.1.10	Integer32	read-only	The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds.
ADR cipSecTunHistLocalAddr	1.3.6.1.4.1.9.9.171.1.4.3.1.1.5	IPSIpAddress	read-only	The IP address of the local endpoint for the IPsec Phase-2 Tunnel.
C32 cipSecTunHistOutAuthFails	1.3.6.1.4.1.9.9.171.1.4.3.1.1.47	Counter32	read-only	The total number of outbound authentication's which ended in failure by this IPsec Phase-2 Tunnel.
C32 cipSecTunHistOutAuths	1.3.6.1.4.1.9.9.171.1.4.3.1.1.46	Counter32	read-only	The total number of outbound authentication's performed by this IPsec Phase-2 Tunnel.
C32 cipSecTunHistOutDropPkts	1.3.6.1.4.1.9.9.171.1.4.3.1.1.45	Counter32	read-only	The total number of packets dropped during send processing by this IPsec Phase-2 Tunnel.
C32 cipSecTunHistOutEncryptFails	1.3.6.1.4.1.9.9.171.1.4.3.1.1.49	Counter32	read-only	The total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel.
C32 cipSecTunHistOutEncrypts	1.3.6.1.4.1.9.9.171.1.4.3.1.1.48	Counter32	read-only	The total number of outbound encryption's performed by this IPsec Phase-2 Tunnel.
C32 cipSecTunHistOutOctets	1.3.6.1.4.1.9.9.171.1.4.3.1.1.38	Counter32	read-only	The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. See also cipSecTunOutOctWraps for the number of times this counter has wrapped.
C32 cipSecTunHistOutOctWraps	1.3.6.1.4.1.9.9.171.1.4.3.1.1.40	Counter32	read-only	The number of times the octets sent counter (cipSecTunOutOctets) has wrapped.
C32 cipSecTunHistOutPkts	1.3.6.1.4.1.9.9.171.1.4.3.1.1.44	Counter32	read-only	The total number of packets sent by this IPsec Phase-2 Tunnel.
AUT cipSecTunHistOutSaAhAuthAlgo	1.3.6.1.4.1.9.9.171.1.4.3.1.1.22	AuthAlgo	read-only	The authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.
COM cipSecTunHistOutSaCompAlgo	1.3.6.1.4.1.9.9.171.1.4.3.1.1.24	CompAlgo	read-only	The compression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
DIF cipSecTunHistOutSaDiffHellmanGrp	1.3.6.1.4.1.9.9.171.1.4.3.1.1.20	DiffHellmanGrp	read-only	The Diffie Hellman Group used by the outbound security association of the IPsec Phase-2 Tunnel.
ENC cipSecTunHistOutSaEncryptAlgo	1.3.6.1.4.1.9.9.171.1.4.3.1.1.21	EncryptAlgo	read-only	The encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel.
AUT cipSecTunHistOutSaEspAuthAlgo	1.3.6.1.4.1.9.9.171.1.4.3.1.1.23	AuthAlgo	read-only	The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.
C32 cipSecTunHistOutUncompOctets	1.3.6.1.4.1.9.9.171.1.4.3.1.1.41	Counter32	read-only	The total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecTunHistOutOctets. See also cipSecTunOutDecompOctWraps for the number of times this counter has wrapped.
C32 cipSecTunHistOutUncompOctWraps	1.3.6.1.4.1.9.9.171.1.4.3.1.1.43	Counter32	read-only	The number of times the uncompressed octets sent counter (cipSecTunOutUncompOctets) has wrapped.
ADR cipSecTunHistRemoteAddr	1.3.6.1.4.1.9.9.171.1.4.3.1.1.6	IPSIpAddress	read-only	The IP address of the remote endpoint for the IPsec Phase-2 Tunnel.
TIM cipSecTunHistStartTime	1.3.6.1.4.1.9.9.171.1.4.3.1.1.11	TimeStamp	read-only	The value of sysUpTime in hundredths of seconds when the IPsec Phase-2 Tunnel was started.
INT cipSecTunHistTermReason	1.3.6.1.4.1.9.9.171.1.4.3.1.1.2	INTEGER	read-only	The reason the IPsec Phase-2 Tunnel was terminated. Possible reasons include: 1 = other 2 = normal termination 3 = operator request 4 = peer delete request was received 5 = contact with peer was lost 6 = local failure occurred 7 = operator initiated check point request
C32 cipSecTunHistTotalRefreshes	1.3.6.1.4.1.9.9.171.1.4.3.1.1.13	Counter32	read-only	The total number of security association refreshes performed.
C32 cipSecTunHistTotalSas	1.3.6.1.4.1.9.9.171.1.4.3.1.1.14	Counter32	read-only	The total number of security associations used during the life of the IPsec Phase-2 Tunnel.
T/F cipSecTunIkeTunnelAlive	1.3.6.1.4.1.9.9.171.1.3.2.1.3	TruthValue	read-only	An indicator which specifies whether or not the IPsec Phase-1 IKE Tunnel currently exists.
I32 cipSecTunIkeTunnelIndex	1.3.6.1.4.1.9.9.171.1.3.2.1.2	Integer32	read-only	The index of the associated IPsec Phase-1 IKE Tunnel. (cikeTunIndex in the cikeTunnelTable)
C32 cipSecTunInAuthFails	1.3.6.1.4.1.9.9.171.1.3.2.1.36	Counter32	read-only	The total number of inbound authentication's which ended in failure by this IPsec Phase-2 Tunnel .
C32 cipSecTunInAuths	1.3.6.1.4.1.9.9.171.1.3.2.1.35	Counter32	read-only	The total number of inbound authentication's performed by this IPsec Phase-2 Tunnel.
C32 cipSecTunInDecompOctets	1.3.6.1.4.1.9.9.171.1.3.2.1.29	Counter32	read-only	The total number of decompressed octets received by this IPsec Phase-2 Tunnel. This value is accumulated AFTER the packet is decompressed. If compression is not being used, this value will match the value of cipSecTunInOctets. See also cipSecTunInDecompOctWraps for the number of times this counter has wrapped.
C32 cipSecTunInDecompOctWraps	1.3.6.1.4.1.9.9.171.1.3.2.1.31	Counter32	read-only	The number of times the decompressed octets received counter (cipSecTunInDecompOctets) has wrapped.
C32 cipSecTunInDecryptFails	1.3.6.1.4.1.9.9.171.1.3.2.1.38	Counter32	read-only	The total number of inbound decryption's which ended in failure by this IPsec Phase-2 Tunnel.
C32 cipSecTunInDecrypts	1.3.6.1.4.1.9.9.171.1.3.2.1.37	Counter32	read-only	The total number of inbound decryption's performed by this IPsec Phase-2 Tunnel.
I32 cipSecTunIndex	1.3.6.1.4.1.9.9.171.1.3.2.1.1	Integer32	not-accessible	The index of the IPsec Phase-2 Tunnel Table. The value of the index is a number which begins at one and is incremented with each tunnel that is created. The value of this object will wrap at 2,147,483,647.
C32 cipSecTunInDropPkts	1.3.6.1.4.1.9.9.171.1.3.2.1.33	Counter32	read-only	The total number of packets dropped during receive processing by this IPsec Phase-2 Tunnel. This count does NOT include packets dropped due to Anti-Replay processing.
C32 cipSecTunInOctets	1.3.6.1.4.1.9.9.171.1.3.2.1.26	Counter32	read-only	The total number of octets received by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE determining whether or not the packet should be decompressed. See also cipSecTunInOctWraps for the number of times this counter has wrapped.
C32 cipSecTunInOctWraps	1.3.6.1.4.1.9.9.171.1.3.2.1.28	Counter32	read-only	The number of times the octets received counter (cipSecTunInOctets) has wrapped.
C32 cipSecTunInPkts	1.3.6.1.4.1.9.9.171.1.3.2.1.32	Counter32	read-only	The total number of packets received by this IPsec Phase-2 Tunnel.
C32 cipSecTunInReplayDropPkts	1.3.6.1.4.1.9.9.171.1.3.2.1.34	Counter32	read-only	The total number of packets dropped during receive processing due to Anti-Replay processing by this IPsec Phase-2 Tunnel.
AUT cipSecTunInSaAhAuthAlgo	1.3.6.1.4.1.9.9.171.1.3.2.1.18	AuthAlgo	read-only	The authentication algorithm used by the inbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.
COM cipSecTunInSaDecompAlgo	1.3.6.1.4.1.9.9.171.1.3.2.1.20	CompAlgo	read-only	The decompression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
DIF cipSecTunInSaDiffHellmanGrp	1.3.6.1.4.1.9.9.171.1.3.2.1.16	DiffHellmanGrp	read-only	The Diffie Hellman Group used by the inbound security association of the IPsec Phase-2 Tunnel.
ENC cipSecTunInSaEncryptAlgo	1.3.6.1.4.1.9.9.171.1.3.2.1.17	EncryptAlgo	read-only	The encryption algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
AUT cipSecTunInSaEspAuthAlgo	1.3.6.1.4.1.9.9.171.1.3.2.1.19	AuthAlgo	read-only	The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.
KEY cipSecTunKeyType	1.3.6.1.4.1.9.9.171.1.3.2.1.6	KeyType	read-only	The type of key used by the IPsec Phase-2 Tunnel.
I32 cipSecTunLifeSize	1.3.6.1.4.1.9.9.171.1.3.2.1.8	Integer32	read-only	The negotiated LifeSize of the IPsec Phase-2 Tunnel in kilobytes.
I32 cipSecTunLifeTime	1.3.6.1.4.1.9.9.171.1.3.2.1.9	Integer32	read-only	The negotiated LifeTime of the IPsec Phase-2 Tunnel in seconds.
ADR cipSecTunLocalAddr	1.3.6.1.4.1.9.9.171.1.3.2.1.4	IPSIpAddress	read-only	The IP address of the local endpoint for the IPsec Phase-2 Tunnel.
cipSecTunnelEntry	1.3.6.1.4.1.9.9.171.1.3.2.1		not-accessible	Each entry contains the attributes associated with an active IPsec Phase-2 Tunnel.
cipSecTunnelHistEntry	1.3.6.1.4.1.9.9.171.1.4.3.1.1		not-accessible	Each entry contains the attributes associated with a previously active IPsec Phase-2 Tunnel.
cipSecTunnelHistTable	1.3.6.1.4.1.9.9.171.1.4.3.1		not-accessible	The IPsec Phase-2 Tunnel History Table. This table is implemented as a sliding window in which only the last n entries are maintained. The maximum number of entries is specified by the cipSecHistTableSize object.
NTF cipSecTunnelStart	1.3.6.1.4.1.9.9.171.2.0.7			This notification is generated when an IPsec Phase-2 Tunnel becomes active.
NTF cipSecTunnelStop	1.3.6.1.4.1.9.9.171.2.0.8			This notification is generated when an IPsec Phase-2 Tunnel becomes inactive.
cipSecTunnelTable	1.3.6.1.4.1.9.9.171.1.3.2		not-accessible	The IPsec Phase-2 Tunnel Table. There is one entry in this table for each active IPsec Phase-2 Tunnel.
C32 cipSecTunOutAuthFails	1.3.6.1.4.1.9.9.171.1.3.2.1.48	Counter32	read-only	The total number of outbound authentication's which ended in failure by this IPsec Phase-2 Tunnel.
C32 cipSecTunOutAuths	1.3.6.1.4.1.9.9.171.1.3.2.1.47	Counter32	read-only	The total number of outbound authentication's performed by this IPsec Phase-2 Tunnel.
C32 cipSecTunOutDropPkts	1.3.6.1.4.1.9.9.171.1.3.2.1.46	Counter32	read-only	The total number of packets dropped during send processing by this IPsec Phase-2 Tunnel.
C32 cipSecTunOutEncryptFails	1.3.6.1.4.1.9.9.171.1.3.2.1.50	Counter32	read-only	The total number of outbound encryption's which ended in failure by this IPsec Phase-2 Tunnel.
C32 cipSecTunOutEncrypts	1.3.6.1.4.1.9.9.171.1.3.2.1.49	Counter32	read-only	The total number of outbound encryption's performed by this IPsec Phase-2 Tunnel.
C32 cipSecTunOutOctets	1.3.6.1.4.1.9.9.171.1.3.2.1.39	Counter32	read-only	The total number of octets sent by this IPsec Phase-2 Tunnel. This value is accumulated AFTER determining whether or not the packet should be compressed. See also cipSecTunOutOctWraps for the number of times this counter has wrapped.
C32 cipSecTunOutOctWraps	1.3.6.1.4.1.9.9.171.1.3.2.1.41	Counter32	read-only	The number of times the out octets counter (cipSecTunOutOctets) has wrapped.
C32 cipSecTunOutPkts	1.3.6.1.4.1.9.9.171.1.3.2.1.45	Counter32	read-only	The total number of packets sent by this IPsec Phase-2 Tunnel.
AUT cipSecTunOutSaAhAuthAlgo	1.3.6.1.4.1.9.9.171.1.3.2.1.23	AuthAlgo	read-only	The authentication algorithm used by the outbound authentication header (AH) security association of the IPsec Phase-2 Tunnel.
COM cipSecTunOutSaCompAlgo	1.3.6.1.4.1.9.9.171.1.3.2.1.25	CompAlgo	read-only	The compression algorithm used by the inbound security association of the IPsec Phase-2 Tunnel.
DIF cipSecTunOutSaDiffHellmanGrp	1.3.6.1.4.1.9.9.171.1.3.2.1.21	DiffHellmanGrp	read-only	The Diffie Hellman Group used by the outbound security association of the IPsec Phase-2 Tunnel.
ENC cipSecTunOutSaEncryptAlgo	1.3.6.1.4.1.9.9.171.1.3.2.1.22	EncryptAlgo	read-only	The encryption algorithm used by the outbound security association of the IPsec Phase-2 Tunnel.
AUT cipSecTunOutSaEspAuthAlgo	1.3.6.1.4.1.9.9.171.1.3.2.1.24	AuthAlgo	read-only	The authentication algorithm used by the inbound encapsulation security protocol (ESP) security association of the IPsec Phase-2 Tunnel.
C32 cipSecTunOutUncompOctets	1.3.6.1.4.1.9.9.171.1.3.2.1.42	Counter32	read-only	The total number of uncompressed octets sent by this IPsec Phase-2 Tunnel. This value is accumulated BEFORE the packet is compressed. If compression is not being used, this value will match the value of cipSecTunOutOctets. See also cipSecTunOutDecompOctWraps for the number of times this counter has wrapped.
C32 cipSecTunOutUncompOctWraps	1.3.6.1.4.1.9.9.171.1.3.2.1.44	Counter32	read-only	The number of times the uncompressed octets sent counter (cipSecTunOutUncompOctets) has wrapped.
ADR cipSecTunRemoteAddr	1.3.6.1.4.1.9.9.171.1.3.2.1.5	IPSIpAddress	read-only	The IP address of the remote endpoint for the IPsec Phase-2 Tunnel.
I32 cipSecTunSaLifeSizeThreshold	1.3.6.1.4.1.9.9.171.1.3.2.1.11	Integer32	read-only	The security association LifeSize refresh threshold in kilobytes.
I32 cipSecTunSaLifeTimeThreshold	1.3.6.1.4.1.9.9.171.1.3.2.1.12	Integer32	read-only	The security association LifeTime refresh threshold in seconds.
TUN cipSecTunStatus	1.3.6.1.4.1.9.9.171.1.3.2.1.51	TunnelStatus	read-write	The status of the MIB table row. This object can be used to bring the tunnel down by setting value of this object to destroy(2). When the value is set to destroy(2), the SA bundle is destroyed and this row is deleted from this table. When this MIB value is queried, the value of active(1) is always returned, if the instance exists. This object cannot be used to create a MIB table row.
C32 cipSecTunTotalRefreshes	1.3.6.1.4.1.9.9.171.1.3.2.1.13	Counter32	read-only	The total number of security association refreshes performed.
ciscoIpSecFlowMonitorMIB	1.3.6.1.4.1.9.9.171			This is a MIB Module for monitoring the structures in IPSec-based Virtual Private Networks. The MIB has been designed to be adopted as an IETF standard. Hence Cisco-specific features of IPSec protocol are excluded from this MIB. Acronyms The following acronyms are used in this document: IPSec: Secure IP Protocol VPN: Virtual Private Network ISAKMP: Internet Security Association and Key Exchange Protocol IKE: Internet Key Exchange Protocol SA: Security Association MM: Main Mode - the process of setting up a Phase 1 SA to secure the exchanges required to setup Phase 2 SAs QM: Quick Mode - the process of setting up Phase 2 Security Associations using a Phase 1 SA. Overview of IPsec MIB The MIB contains six major groups of objects which are used to manage the IPSec Protocol. These groups include a Levels Group, a Phase-1 Group, a Phase-2 Group, a History Group, a Failure Group and a TRAP Control Group. The following table illustrates the structure of the IPSec MIB. The Phase 1 group models objects pertaining to IKE negotiations and tunnels. The Phase 2 group models objects pertaining to IPSec data tunnels. The History group is to aid applications that do trending analysis. The Failure group is to enable an operator to do troubleshooting and debugging of the VPN Router. Further, counters are supported to aid Intrusion Detection. In addition to the five major MIB Groups, there are a number of Notifications. The following table illustrates the name and description of the IPSec TRAPs. For a detailed discussion, please refer to the IETF draft draft-ietf-ipsec-flow-monitoring-mib-00.txt.

RFC description

Cisco IPSec VPN flow monitoring for security association and tunnel management.

Start monitoring Cisco router/firewall/VPN concentrator terminating IPsec tunnels with a free 30-day trial of IPNetwork Monitor. Import MIBs, browse SNMP OIDs, create custom SNMP monitors, configure alerts, and monitor any SNMP-enabled network device from a single console.

Download CISCO-IPSEC-FLOW-MONITOR-MIB